cbcvebase.
CVE-2001-1120
published 2001-07-11

CVE-2001-1120: Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

PriorityP420medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
1.93%
77.4th percentile
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

Affected

12 ranges
VendorProductVersion rangeFixed in
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
allairecoldfusion_server
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.